Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

Gold

Static Commands on PIX

lanA<-->pixA<-->router<-->routerB<-->lanB

router<-->routerC<-->lanC

i was using static command on the pix.

static (inside,outside) lanB lanA netmask 255.255.255.0

static (inside,outside) lanC lanA netmask 255.255.255.0

i know that the above commands are invalid, please advise asap. thanks in advance.

4 REPLIES
Gold

Re: Static Commands on PIX

Hi -

Please read the following document :

> http://www.cisco.com/warp/public/707/28.html

Hope this helps.

New Member

Re: Static Commands on PIX

The static statement must use addresses that are on the same subnet as the pix. LanA address should be ok, but lanb is on the other side of a router. Lanb should be an unused address on the same sub as the outside interface.

Gold

Re: Static Commands on PIX

Thank you for your response.

The real question is that there are different networks/subnets need access to lanA. How should we configure the pixA?

Thanks in advance.

Silver

Re: Static Commands on PIX

I understand that lanA is one your inside interface and lanB is on you outside interface. I assume you did not change the default security levels and you do not want to do any translations.

In that case the following configuration would be enough for users to start sessions both ways:

static (inside, outside)lanA lanA netmask 255.255.255.0

nat (inside) 0 lanA 255.255.255.0

nat (outside) 0 lanB 255.255.255.0

nat (outside) 0 lanC 255.255.255.0

Should be all :-)

Kind Regards,

Leo

static

110
Views
0
Helpful
4
Replies
CreatePlease login to create content